[Snyk] Upgrade graphql from 15.8.0 to 16.6.0 #76

dev-daysmart · 2023-01-11T20:09:58Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade graphql from 15.8.0 to 16.6.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Warning: This is a major version upgrade, and may be a breaking change.

The recommended version is 80 versions ahead of your current version.
The recommended version was released 5 months ago, on 2022-08-16.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-DEBUG-3227433	246/1000 Why? Recently disclosed, CVSS 3.5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: graphql

16.6.0 - 2022-08-16
v16.6.0 (2022-08-16)

New Feature 🚀
- #3645 createSourceEventStream: introduce named arguments and deprecate positional arguments (@ yaacovCR)
- #3702 parser: limit maximum number of tokens (@ IvanGoncharov)
Bug Fix 🐞
- #3686 Workaround for codesandbox having bug with TS enums (@ IvanGoncharov)
- #3701 Parser: allow 'options' to explicitly accept undefined (@ IvanGoncharov)
Committers: 2
- Ivan Goncharov(@ IvanGoncharov)
- Yaacov Rydzinski (@ yaacovCR)
16.5.0 - 2022-05-09
v16.5.0 (2022-05-09)

New Feature 🚀
- #3565 Expose GraphQLErrorOptions type (#3554) (@ IvanGoncharov)
Committers: 1
- Ivan Goncharov(@ IvanGoncharov)
16.5.0-canary.pr.3686.d9ad8e3fd58929d38deea522d794a6b22d3244b5 - 2022-08-02
16.4.0 - 2022-04-25
v16.4.0 (2022-04-25)

New Feature 🚀
- #3465 refactor: use object for GraphQLError constructor (@ n1ru4l)
- #3487 feat: expose getArgumentValues (@ saihaj)
Bug Fix 🐞
- #3514 GraphQLError: switch constructor overload order (@ glasser)
Docs 📝
2 PRs were merged
- #3505 correct outdated documentation (@ Ginhing)
- #3512 Update documentation on deprecated formatError(..) (@ dwelch2344)
Polish 💅
3 PRs were merged
- #3522 tests(execution): add missing new lines (@ IvanGoncharov)
- #3524 tests(printSchema): test omitting schema of common names (@ IvanGoncharov)
- #3537 ESLint: disallow using node globals in src/tests (@ IvanGoncharov)
Internal 🏠
26 PRs were merged
- #3468 ci: add stub action for canary releases on PRs (@ IvanGoncharov)
- #3470 ci: implement canary releases on PRs (@ IvanGoncharov)
- #3472 ci: remove NPM caching on canary release script (@ IvanGoncharov)
- #3473 ci: Pass 'GITHUB_TOKEN' to GitHub CLI (@ IvanGoncharov)
- #3475 ci: checkout repo in canary workflow (@ IvanGoncharov)
- #3477 ci: fix & cleanup script for modifying NPM package into canary (@ IvanGoncharov)
- #3479 ci: Add missing require to canary script (@ IvanGoncharov)
- #3481 ci: fix missing PR number in canary release workflow (@ IvanGoncharov)
- #3483 ci: fix missing PR number in canary release workflow (@ IvanGoncharov)
- #3484 ci: Moving GH Action template syntax to env variables (@ IvanGoncharov)
- #3486 ci: improve comment on canary releases (@ IvanGoncharov)
- #3488 ci: Extract branch publishing into separate workflow (@ IvanGoncharov)
- #3489 ci: use '.node-version' file to configure node version used for CI (@ IvanGoncharov)
- #3491 ci: use separate workflows for 'push' and 'pull_request' (@ IvanGoncharov)
- #3493 ci: remove unused 'workflow_id' input (@ IvanGoncharov)
- #3496 ci: fix deprecation of canary package (@ IvanGoncharov)
- #3497 ci: use environments to track deployments (@ IvanGoncharov)
- #3502 ci: fix deployments of npm & deno branches (@ IvanGoncharov)
- #3503 ci: Add '@ github-actions' bot (@ IvanGoncharov)
- #3523 github-actions-bot: replace 'octokit/request-action' action (@ IvanGoncharov)
- #3525 github-actions-bot: Fix collapsing of unrelated comments (@ IvanGoncharov)
- #3530 integrationTests/node: fix crash on Mac with M1 by using docker (@ IvanGoncharov)
- #3534 github-actions-bot: fix publishing of canary releases (@ IvanGoncharov)
- #3536 github-actions-bot: fix usage of NPM_CANARY_PR_PUBLISH_TOKEN (@ IvanGoncharov)
- #3538 github-actions-bot: fix reply on commands (@ IvanGoncharov)
- #3543 pass valid value to codecov config (@ is2ei)
Dependency 📦
2 PRs were merged
- #3485 Update deps (@ IvanGoncharov)
- #3533 Update deps (@ IvanGoncharov)
Committers: 7
- David Glasser(@ glasser)
- David Welch(@ dwelch2344)
- Ginhing(@ Ginhing)
- Horie Issei(@ is2ei)
- Ivan Goncharov(@ IvanGoncharov)
- Laurin Quast(@ n1ru4l)
- Saihajpreet Singh(@ saihaj)
16.4.0-canary.pr.2839.e3a8069cfaa6406186314b62aced6487f417a2e6 - 2022-04-27
16.3.0 - 2022-01-26
v16.3.0 (2022-01-26)

New Feature 🚀
- #3454 feat: allow providing an object to the GraphQLError constructor (@ n1ru4l)
- #3464 Expose getArgumentValues as public API (@ IvanGoncharov)
Bug Fix 🐞
- #3442 Prevent Infinite Loop in OverlappingFieldsCanBeMergedRule (@ nicolaslt)
- #3455 OverlappingFieldsCanBeMerged: sort argument values before comparing (@ IvanGoncharov)
Docs 📝
2 PRs were merged
- #3269 feat: setup docs site (@ saihaj)
- #3437 CONTRIBUTING.md: remove reference to Facebook bug bounty program (@ IvanGoncharov)
Polish 💅
7 PRs were merged
- #3441 UniqueArgumentDefinitionNamesRule: Improve tests (@ Cito)
- #3446 Use 'eslint-plugin-simple-import-sort' to sort imports (@ IvanGoncharov)
- #3447 Fix index.ts files to be compatible with Typedoc (@ IvanGoncharov)
- #3452 validation-test.ts: various grammar fixes (@ spawnia)
- #3457 OverlappingFieldsCanBeMergedRule: simplify argument comparison (@ IvanGoncharov)
- #3459 blockString-tests: remove duplicate test, fix grammar (@ Cito)
- #3461 visit: simplify handling of root node (@ IvanGoncharov)
Internal 🏠
5 PRs were merged
- #3433 gh/actions: refactor out action to deploy branches (@ IvanGoncharov)
- #3434 gh/actions: remove 'npm dedupe' check since it unexpectadly do update (@ IvanGoncharov)
- #3435 gh/actions: run benchmark & diff-npm-package only on PRs (@ IvanGoncharov)
- #3436 gh/actions: make all cloned repo read-only (@ IvanGoncharov)
- #3443 ci/checkPackageLock: update only package-lock.json (@ IvanGoncharov)
Dependency 📦
4 PRs were merged
- #3438 Update deps (@ IvanGoncharov)
- #3444 Update deps (@ IvanGoncharov)
- #3462 Update deps (@ IvanGoncharov)
- #3463 Update deps + fix 'npm audit' (@ IvanGoncharov)
Committers: 6
- Benedikt Franke(@ spawnia)
- Christoph Zwerschke(@ Cito)
- Ivan Goncharov(@ IvanGoncharov)
- Laurin Quast(@ n1ru4l)
- Nicolas Lagoutte(@ nicolaslt)
- Saihajpreet Singh(@ saihaj)
16.3.0-canary.pr.3521.f50bec8fecfd5aaa7e74227c5a4b9056dae9e849 - 2022-03-26
16.3.0-canary.pr.3520.688c34204fb183f15a334882567d4d6d011cd234 - 2022-03-25
16.3.0-canary.pr.3518.3a63d81d7ad886f7edc3cab06fd2295b71c91bed - 2022-03-23
16.3.0-canary.pr.3514.a34e553c7cc83a21ffa73c7bf1a1932007a2606b - 2022-03-20
16.3.0-canary.pr.3512.a3b8b9e394ae4050a2100de2720f8b3ded0a3e41 - 2022-03-18
16.3.0-canary.pr.3510.942fbd8ea3d803e74908fabecbe03dfaefe3e5c8 - 2022-03-14
16.3.0-canary.pr.3510.5099f4491dc2a35a3e4a0270a55e2a228c15f13b - 2022-03-14
16.3.0-canary.pr.3506.be685b29062b443b0962af292fb5c9337331db70 - 2022-02-26
16.3.0-canary.pr.3505.b157d96d56ade071a24a1b0c71334efb9af57689 - 2022-02-21
16.3.0-canary.pr.3505.9190e5ce1cc557931a15ca1f7b15586f033c8a02 - 2022-02-20
16.3.0-canary.pr.3504.7c7b6ed1e17e6cf5e114f1a89a24d289fb969aff - 2022-02-18
16.3.0-canary.pr.3502.de9b8457d4a34eb544ff7b97ffacd641c913a2d1 - 2022-02-16
16.3.0-canary.pr.3501.1daccf7bfd7fe9ffeabb319f26aa1b9bf5133e4c - 2022-02-15
16.3.0-canary.pr.3499.ee62926bcf03d7d05ccb227cb7a67338ebab423d - 2022-02-14
16.3.0-canary.pr.3498.5fd2797529557639476d5aa24359f97653bcbf22 - 2022-02-12
16.3.0-canary.pr.3497.4a0bc98371a633cf49efc236c1011ca5a955e848 - 2022-02-12
16.3.0-canary.pr.3496.43a2529cfa6890f5a11867e62c7a817d7879235d - 2022-02-11
16.3.0-canary.pr.3494.612fd45b42a5e2aa26d9bd72e1c89d7219620dea - 2022-02-11
16.3.0-canary.pr.3494.25e1e8c8de6b13288ac61febf75d6f415f81a044 - 2022-02-17
16.3.0-canary.pr.3493.365426c363b5db8b3278d34deff0d790edcb6fdd - 2022-02-10
16.3.0-canary.pr.3489.568f3378cc3cf660e25d79253cc9a101ae9df4e0 - 2022-02-09
16.3.0-canary.pr.3488.9f7ad13c9ae7289c4d425698bd040d36978ff81a - 2022-02-09
16.3.0-canary.pr.3488.0d90f0c792c9d223b5505d3cc0d9a8519bb2883a - 2022-02-09
16.3.0-canary.pr.3487.a0dcf0130ae81994df47049c9233df11516abfcd - 2022-02-09
16.3.0-canary.pr.3487.8c9c7200bf3db49bf1c32055d60fdd5ea3089add - 2022-02-08
16.3.0-canary.pr.3486.c8ac9896696f401b9efffa1806443732cb0a010d - 2022-02-07
16.3.0-canary.pr.3485.d71879afe1f1411b80adcbfe33bd95ab57e7fc11 - 2022-02-07
16.3.0-canary.pr.3485.3c71ef7dd720383cba84a1637665fc18001c4f32 - 2022-02-07
16.3.0-canary.pr.3484.b6999ce061b975f1c6c99c790782323b91c5eb21 - 2022-02-05
16.3.0-canary.pr.3483.undefined - 2022-02-05
16.3.0-canary.pr.3482.undefined - 2022-02-05
16.3.0-canary.pr.3482.e5eb0dafc74d537a1e07c6a2cc15afdc1431537f - 2022-02-10
16.3.0-canary.pr.3482.7777ea054008ac921136cf694d64041494250def - 2022-02-11
16.3.0-canary.pr.3482.6f2ec221eab5916d6d7bbfc6167256477bd35c45 - 2022-02-12
16.3.0-canary.pr.3481.undefined - 2022-02-05
16.3.0-canary.pr.3480.undefined - 2022-02-04
16.3.0-canary.pr.3479.undefined - 2022-02-04
16.3.0-canary.pr.3469.bef54ca054e29cae26d2dd974eedf2c12bca7ef4 - 2022-02-02
16.3.0-canary.pr.3469.bc0462e3d100314d7aa00049d2c15cbb58d8b3d8 - 2022-02-02
16.3.0-canary.pr.3469.8212fa925aa1a32715752030913a6e296e8c0fd3 - 2022-02-02
16.3.0-canary.pr.3465.6c6701425310ce7f866ce71628bdf9443ae0f0af - 2022-03-23
16.3.0-canary.pr.3418.662180be9091ee1edf699b4cf4922bd5b7705297 - 2022-02-23
16.3.0-canary.pr.3418.64c65ba6a2e7e923ed9a476c945f3c72da7a6c7f - 2022-02-22
16.3.0-canary.pr.3134.aaacb12ce929a1f2899503018cc6d39a2f83ae28 - 2022-02-23
16.3.0-canary.pr.2839.f76ee8fd7af45d88a33dfc674f2a71d505d2d9b1 - 2022-02-23
16.3.0-canary.pr.2839.aab5478afb03155d26abbee8ad8fa34841ee3be3 - 2022-04-18
16.3.0-canary.pr.2839.9c3b21ca34d760070b76424327061e6b4ad26f05 - 2022-03-07
16.3.0-canary.pr.2839.7e65b1d8e7b5bf1ef1592babff40b9873198a741 - 2022-02-07
16.3.0-canary.pr.2839.5c5e3621fdc4e4ee4e7f781962fe4a99319d6ac0 - 2022-03-07
16.3.0-canary.pr.2839.3405bedecf6a15ea89f64d6a86d84234a3c0cf7b - 2022-02-23
16.3.0-canary.pr.2839.0f282a62cbd565b6e8682f6c1e8c49ac075ac257 - 2022-02-23
16.3.0-canary.pr.2839.09322403ecf6640bfc695dab3ffe5e98f611911d - 2022-04-22
16.3.0-canary.pr.2757.7e793c133f5b9c47a1b12e98ea3a35b1b1471dc4 - 2022-02-23
16.2.0 - 2021-12-17
Read more
16.1.0 - 2021-12-07
Read more
16.1.0-experimental-stream-defer.6 - 2021-12-07
16.1.0-experimental-stream-defer.6
16.0.1 - 2021-11-01
16.0.0 - 2021-10-28
16.0.0-rc.7.experimental-stream-defer.4 - 2021-10-27
16.0.0-rc.7 - 2021-10-27
16.0.0-rc.6 - 2021-10-23
16.0.0-rc.5 - 2021-10-18
16.0.0-rc.4 - 2021-10-13
16.0.0-rc.3 - 2021-10-05
16.0.0-rc.2.experimental-stream-defer.3 - 2021-08-30
16.0.0-rc.2 - 2021-08-30
16.0.0-rc.1 - 2021-08-26
16.0.0-experimental-stream-defer.5 - 2021-10-28
16.0.0-alpha.5 - 2021-06-20
16.0.0-alpha.4 - 2021-06-14
16.0.0-alpha.3.experimental-stream-defer.2 - 2021-06-04
16.0.0-alpha.3 - 2021-06-03
16.0.0-alpha.2 - 2021-05-25
16.0.0-alpha.1 - 2021-05-14
15.8.0 - 2021-12-07
v15.8.0 (2021-12-07)

New Feature 🚀
- #3410 Refine getNamedType() for Input and Output types (@ IvanGoncharov)
Internal 🏠
2 PRs were merged
- #3411 publish 15.x.x packages only under '15.x.x' tag (@ IvanGoncharov)
- #3412 cspell: do not show progress (@ IvanGoncharov)
Committers: 1
- Ivan Goncharov(@ IvanGoncharov)

from graphql GitHub release notes

Commit messages

Package name: graphql

3a51eca 16.6.0
f0a0a4d parser: limit maximum number of tokens (#3702)
6c6508b Parser: allow 'options' to explicitly accept undefined (#3701)
af8221a Workaround for codesandbox having bug with TS enums (#3686)
59a73d6 createSourceEventStream: introduce named arguments and deprecate positional arguments (#3645)
1f8ba95 16.5.0
1112b4d Expose GraphQLErrorOptions type (#3554) (#3565)
23dba4e 16.4.0
af64b67 pass valid value to codecov config (#3543)
16503cd github-actions-bot: fix reply on commands (#3538)
0926554 ESLint: disallow using node globals in src/tests (#3537)
4f062aa github-actions-bot: fix usage of NPM_CANARY_PR_PUBLISH_TOKEN (#3536)
a981dc6 github-actions-bot: fix publishing of canary releases (#3534)
bb70cbc Update deps (#3533)
b38429f integrationTests/node: fix crash on Mac with M1 by using docker (#3530)
15040d0 Update documentation on deprecated formatError(..) (#3512)
ff06428 refactor: use object for GraphQLError constructor (#3465)
5f247e0 github-actions-bot: Fix collapsing of unrelated comments (#3525)
faa42e2 tests(printSchema): test omitting schema of common names (#3524)
def26e6 github-actions-bot: replace 'octokit/request-action' action (#3523)
f3248cd tests(execution): add missing new lines (#3522)
6bcd241 ci: Add '@ github-actions' bot (#3503)
e1726df GraphQLError: switch constructor overload order (#3514)
da57238 correct outdated documentation (#3505)

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade graphql from 15.8.0 to 16.6.0. See this package in npm: https://www.npmjs.com/package/graphql See this project in Snyk: https://app.snyk.io/org/daysmart/project/d9b2d1c2-c0e6-43ec-bb4f-064c50ff1a22?utm_source=github&utm_medium=referral&page=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade graphql from 15.8.0 to 16.6.0 #76

[Snyk] Upgrade graphql from 15.8.0 to 16.6.0 #76

dev-daysmart commented Jan 11, 2023

v16.6.0 (2022-08-16)

New Feature 🚀

Bug Fix 🐞

Committers: 2

v16.5.0 (2022-05-09)

New Feature 🚀

Committers: 1

v16.4.0 (2022-04-25)

New Feature 🚀

Bug Fix 🐞

Docs 📝

Polish 💅

Internal 🏠

Dependency 📦

Committers: 7

v16.3.0 (2022-01-26)

New Feature 🚀

Bug Fix 🐞

Docs 📝

Polish 💅

Internal 🏠

Dependency 📦

Committers: 6

v15.8.0 (2021-12-07)

New Feature 🚀

Internal 🏠

Committers: 1

[Snyk] Upgrade graphql from 15.8.0 to 16.6.0 #76

Are you sure you want to change the base?

[Snyk] Upgrade graphql from 15.8.0 to 16.6.0 #76

Conversation

dev-daysmart commented Jan 11, 2023

Snyk has created this PR to upgrade graphql from 15.8.0 to 16.6.0.

v16.6.0 (2022-08-16)

New Feature 🚀

Bug Fix 🐞

Committers: 2

v16.5.0 (2022-05-09)

New Feature 🚀

Committers: 1

v16.4.0 (2022-04-25)

New Feature 🚀

Bug Fix 🐞

Docs 📝

Polish 💅

Internal 🏠

Dependency 📦

Committers: 7

v16.3.0 (2022-01-26)

New Feature 🚀

Bug Fix 🐞

Docs 📝

Polish 💅

Internal 🏠

Dependency 📦

Committers: 6

v15.8.0 (2021-12-07)

New Feature 🚀

Internal 🏠

Committers: 1